$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft File: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft (raw, json) Hash identifier: dHHPyx7D2bOKypEbvsNQNkJSaPoc/y4tCcAke0L/nvA= Subject key identifier: 5D:B3:B7:BB:0E:7D:F6:99:02:76:8A:64:FB:38:94:7F:12:6F:1F:E2 Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 2997F3B8A04F0A68C9F0EED41465DCA55907E256 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft Manifest number: 0153 Signing time: Sun 29 Jun 2025 13:42:01 +0000 Manifest this update: Sun 29 Jun 2025 13:37:01 +0000 Manifest next update: Wed 02 Jul 2025 20:56:01 +0000 Files and hashes: 1: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: HdUQMZ7SOKpAyFz6JesRqd55RtIwIZs1nM/RQd+kRrc=) 2: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: Ss0eIh55eF1+18NBRc56XTthBY2pyra5MKG9X4X5KfE=) 3: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl (hash: iD/JlUL8Irm6C2r2Ppp9TsKWO7/SGVbtIwl5H5KX5t4=) 4: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: jZdzzwUnE5NySNtgaEjKcLOBnZGLd0OeUfLgUNjS8h8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 20:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:97:f3:b8:a0:4f:0a:68:c9:f0:ee:d4:14:65:dc:a5:59:07:e2:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: Jun 29 13:37:01 2025 GMT Not After : Jul 2 20:56:01 2025 GMT Subject: CN=5DB3B7BB0E7DF69902768A64FB38947F126F1FE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:ab:5f:5a:5a:88:d8:92:21:23:09:11:da: dc:38:a6:55:2e:ed:e0:8b:0e:3f:8e:ff:c9:f6:21: 00:c2:de:ca:25:c9:85:1a:38:76:ea:4d:1b:5f:5b: 3a:a6:fb:e6:43:23:6d:7a:82:bb:f4:f3:69:1b:ea: 9a:0b:11:40:73:eb:97:cd:bd:5d:92:cf:c7:0d:ce: 48:e3:6c:60:23:94:f7:b3:d2:b5:6b:d7:11:3d:56: 35:cc:d0:5c:f4:70:c8:9b:80:4a:3c:62:1a:56:20: 2f:c8:62:62:58:c1:41:0e:b0:d8:d7:f8:8a:ee:96: 6f:2a:14:37:b6:77:3c:40:72:e4:c0:59:39:df:cc: 4d:4a:c2:81:a6:64:e2:78:91:d6:1c:09:fb:e5:9a: 6a:0e:2c:f6:5e:df:55:d5:aa:cb:ab:69:93:5a:05: 00:91:17:fb:bf:81:e8:5f:2e:9e:95:77:73:1c:68: 82:e4:75:22:0b:82:e0:59:cf:84:44:8d:5e:6d:76: 83:d3:6a:ea:a3:9f:ba:5e:e9:26:7f:b3:41:91:d7: 40:a5:a6:07:37:92:a3:3b:56:5b:4f:0c:39:b7:14: ff:40:7c:79:ec:ff:ae:4b:89:45:c2:69:c9:f4:96: e2:e2:83:ce:1b:9c:83:8f:f2:92:58:8b:c7:91:65: 3d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B3:B7:BB:0E:7D:F6:99:02:76:8A:64:FB:38:94:7F:12:6F:1F:E2 X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:96:04:8d:41:e6:d0:8a:56:91:83:06:5e:ca:85:56:01:5c: 91:6d:00:d3:d7:22:4f:0d:0e:e2:76:e3:93:21:b6:bb:7f:8b: 65:47:fd:7c:f7:20:3e:4b:50:ce:e0:3e:64:48:47:f0:af:e2: 5c:9b:84:88:f7:bf:78:05:20:a9:ec:fc:59:ba:75:f7:33:fd: 58:ad:27:a0:cd:5e:47:fe:0b:84:2f:eb:96:b4:b1:32:0d:e4: 73:98:d6:49:1f:5a:e7:4e:2c:29:2d:e5:c1:be:40:60:2d:33: 47:39:0a:a1:2d:ba:96:52:de:ae:c4:e5:db:8d:00:fc:4c:10: e6:9a:12:61:c2:ba:93:46:91:4a:72:6b:20:25:f2:f1:65:d6: 3b:2c:9d:cf:02:89:f4:da:34:70:6f:7e:a0:ab:d2:ad:9c:b7: 27:89:b5:9c:71:65:db:99:bf:c9:1a:50:41:fa:46:ad:3b:ec: 5d:da:ac:f9:1c:17:f2:83:a7:f3:9b:b4:67:35:0c:5b:42:b9: b2:60:e3:00:96:ef:6f:ca:3b:3a:8b:57:4e:12:f8:50:6a:d7: ba:5d:11:48:ff:99:b0:2f:09:85:f4:ff:9f:79:d0:4c:fc:af: 2b:48:0e:77:f2:6f:7c:53:80:74:88:8d:07:94:d8:f1:71:6f: 42:5a:ea:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZfzuKBPCmjJ8O7UFGXcpVkH4lYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNTA2MjkxMzM3MDFaFw0yNTA3MDIyMDU2MDFaMDMxMTAvBgNV BAMTKDVEQjNCN0JCMEU3REY2OTkwMjc2OEE2NEZCMzg5NDdGMTI2RjFGRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrKtfWlqI2JIhIwkR2tw4plUu 7eCLDj+O/8n2IQDC3solyYUaOHbqTRtfWzqm++ZDI216grv082kb6poLEUBz65fN vV2Sz8cNzkjjbGAjlPez0rVr1xE9VjXM0Fz0cMibgEo8YhpWIC/IYmJYwUEOsNjX +Irulm8qFDe2dzxAcuTAWTnfzE1KwoGmZOJ4kdYcCfvlmmoOLPZe31XVqsuraZNa BQCRF/u/gehfLp6Vd3McaILkdSILguBZz4REjV5tdoPTauqjn7pe6SZ/s0GR10Cl pgc3kqM7VltPDDm3FP9AfHns/65LiUXCacn0luLig84bnIOP8pJYi8eRZT3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXbO3uw599pkCdopk+ziUfxJvH+IwHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkx OTNGMDU0ODFCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+WBI1B5tCKVpGDBl7KhVYBXJFtANPXIk8N DuJ245Mhtrt/i2VH/Xz3ID5LUM7gPmRIR/Cv4lybhIj3v3gFIKns/Fm6dfcz/Vit J6DNXkf+C4Qv65a0sTIN5HOY1kkfWudOLCkt5cG+QGAtM0c5CqEtupZS3q7E5duN APxMEOaaEmHCupNGkUpyayAl8vFl1jssnc8CifTaNHBvfqCr0q2ctyeJtZxxZduZ v8kaUEH6Rq077F3arPkcF/KDp/ObtGc1DFtCubJg4wCW72/KOzqLV04S+FBq17pd EUj/mbAvCYX0/5950Ez8rytIDnfyb3xTgHSIjQeU2PFxb0Ja6jc= -----END CERTIFICATE-----Generated at Mon Jun 30 18:11:52 2025 by rpki-client